Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/Mz556LWw-F_5qfZwTXkiUVn0fUI.roa
File: Mz556LWw-F_5qfZwTXkiUVn0fUI.roa (raw, json)
Hash identifier: /FRW/p+zO5DDRovTEiM0yiQK4FGr7dCtzhj1ifdahZs=
Subject key identifier: 33:3E:79:E8:B5:B0:F8:5F:F9:A9:F6:70:4D:79:22:51:59:F4:7D:42
Certificate issuer: /CN=d9486f7fe4eb6d949b8007b4e4198ce1c878302e
Certificate serial: 018573F1A7A3640139C3AAF8E281299E7BCD
Authority key identifier: D9:48:6F:7F:E4:EB:6D:94:9B:80:07:B4:E4:19:8C:E1:C8:78:30:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Uhvf-TrbZSbgAe05BmM4ch4MC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/Mz556LWw-F_5qfZwTXkiUVn0fUI.roa
Signing time: Mon 02 Jan 2023 19:24:54 +0000
ROA not before: Mon 02 Jan 2023 19:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211592
IP address blocks: 185.254.166.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:f1:a7:a3:64:01:39:c3:aa:f8:e2:81:29:9e:7b:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9486f7fe4eb6d949b8007b4e4198ce1c878302e
Validity
Not Before: Jan 2 19:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=333e79e8b5b0f85ff9a9f6704d79225159f47d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:57:81:5b:45:2c:28:a1:e7:fb:0d:cd:7b:69:
e8:e7:be:ca:1b:2f:70:c6:5c:fc:d0:19:29:f2:fc:
5f:57:bb:df:99:f6:95:0b:19:32:bf:12:cb:14:8c:
ed:d8:04:0e:c8:54:81:ad:83:92:95:79:08:b1:38:
9a:2d:74:e3:04:2d:06:aa:6c:ba:fe:72:bc:5a:b7:
06:06:ec:f3:e9:1e:6d:ca:56:30:c5:c4:2a:bb:29:
8b:64:be:7c:fc:52:58:79:c3:8d:10:0c:f5:b7:c1:
40:ce:6f:a0:20:02:e7:f6:40:ab:3d:89:7f:e0:ce:
92:1b:7e:00:ac:03:9a:9f:68:90:81:32:5c:52:e3:
1f:51:2f:2d:75:df:3f:ca:12:59:23:b1:d4:30:7a:
26:fa:71:f2:16:5b:09:36:ff:37:48:81:e6:4e:f1:
cc:6d:b5:ba:01:03:b3:40:16:ee:82:42:cc:24:11:
42:45:96:64:b5:99:95:f2:e0:2c:ae:f8:b7:f2:ab:
26:ad:fe:4a:ee:64:b6:b6:30:b0:df:0f:08:c7:d4:
25:30:97:ae:17:ec:de:4d:8f:ca:7c:fb:ba:9e:5c:
4f:a4:04:a8:a8:ab:c6:6b:12:55:86:b5:cf:b5:ac:
10:dc:83:4d:ea:6d:23:cd:41:98:3c:0d:6b:85:09:
07:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:3E:79:E8:B5:B0:F8:5F:F9:A9:F6:70:4D:79:22:51:59:F4:7D:42
X509v3 Authority Key Identifier:
keyid:D9:48:6F:7F:E4:EB:6D:94:9B:80:07:B4:E4:19:8C:E1:C8:78:30:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Uhvf-TrbZSbgAe05BmM4ch4MC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/Mz556LWw-F_5qfZwTXkiUVn0fUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.166.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:e1:b7:e7:5a:7b:2c:60:12:62:1d:31:3f:b7:0d:3b:f1:c0:
7a:6f:78:d2:92:51:51:3a:f7:dc:78:70:3d:16:77:5d:71:26:
9f:c5:54:38:30:90:30:0e:79:a7:22:dd:20:c8:1f:2c:c4:0b:
f2:b8:1f:f0:be:05:d5:75:7a:71:f0:08:47:bb:40:6c:72:8e:
db:b9:84:db:b2:f8:0a:8c:8a:9b:2c:7c:0d:ef:4b:46:2d:0b:
65:8e:df:8e:66:10:3f:87:04:6f:8f:45:9c:05:51:6a:4a:4c:
4c:44:09:f8:38:8a:5d:44:51:25:31:3c:3d:f8:20:e7:47:62:
67:27:e2:1f:25:7c:da:a8:46:52:83:20:27:59:e3:7f:75:4c:
4a:80:e5:9a:1c:e1:c3:a2:48:cd:f1:68:f5:49:6b:ca:09:f1:
1a:dc:d4:ab:7c:54:2f:0e:81:b1:e3:4b:ec:73:f5:c8:d5:44:
25:30:fe:16:0c:97:5b:11:60:ec:8a:1f:0f:b0:89:bc:11:f8:
08:fb:5f:71:b7:c3:5a:e2:e3:2d:15:8b:7e:18:63:d7:05:19:
d6:80:bf:5d:73:48:09:27:ac:62:a0:ca:c1:a5:92:a7:a8:67:
0e:89:5e:65:b4:c9:44:6f:27:7e:39:35:cf:35:e9:0b:ce:6e:
cc:94:bd:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:38 2024 by rpki-client on console-ams.rpki-client.org